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IN THE CLAIMS: 



Amended claims follow: 



1 . (Currently Amended) A method for establishing a list of security 
scanner attributes for a computing node within a hierarchy of computing nodes, 
the list of security scanner attributes being associated witli a security scanner 
action to be performed by a security scanner program, the method comprising: 

establishing a hierarchy of lists of attributes, an attribute being comprised 
of an attribute identifier and an attribute value, the attribute value being comprised 
of either a list of attributes or a controlling value used by the security scanner 
program to control an operation of the security scanner program, the list of 
attributes being comprised of a grouping attribute and a series of one or more 
attributes; 

examining the grouping attribute associated with the list of attributes; 

updating an element of the list of attributes if the grouping attribute 
indicates that the element may be updated without also updating other elements in 
the list of attributes; 

updating the element and all other elements of the list of attributes if the 
grouping attribute indicates that updating the element requires all other elements 
to be updated; and 

updating the element, all other elements, and all subordinate elements of 
the list of attributes if the grouping attribute indicates that updating the element 
requires ail subordinate elements of the list of attributes to be updated; 

wherein the grouping attri bu te is associated with the entire list of attributes 
for controlling the updating through selection of at least one of at least three 
scenarios by indicating at least one of: 
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the element may be updated without also updating other elements 
in the list of attributes, 

updating the element requires all other elements in the list of 
attributes to be updated, and 

updating the element requires all other elements in the list of 
attributes and all subordinate elements in the list of attributes to be 
updated . 

2. (Original) The method of claim 1 , wherein the element of the list 
of attributes contains an identifier that uniquely identifies the element and a value, 
wherein the value may itself be a list of elements. 

3. (Cancelled) 

4. (Original) The method of claim 2, wherein updating the element 
involves overwriting the value with another value that may be identical to an 
original value. 

5. (Original) The method of claim 2, wherein updating the element 
and all other elements of the list of attributes involves overwriting each value with 
another value that may be identical to an original value. 

6. (Original) The method of claim 2, wherein updating the element, 
all other elements in the list of attributes, and all subordinate elements of the list 
of attributes involves overwriting each value witli another value that may be 
identical to an original value for each element and each subordinate element of the 
list of attributes. 
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7. (Original) The method of claim 2, wherein if the attribute being 
updated is itself another list of attributes, the grouping attribute can indicate one 

of: 

the attribute can be updated; 

a content of the list of attributes can be replaced; and 

the other list of attributes can be merged with the list of attributes. 

8. (Original) Tlie method of claim 1, wherein the security scanner 
program performs a scanning process on files associated with the computing node 
for malicious computer instructions, w^herein details of the scanning process are 
specified by the list of security scanner attributes. 

9. (Currently Amended) A computer-readable storage medium storing 
instructions that when executed by a computer causes the computer to perform a 
method for establishing a list of securit>^ scanner attributes for a computing node 
within a hierarchy of computing nodes, the list of security seamier attributes being 
associated with a security scanner action to be performed by a security scanner 
program, the method comprising; 

establishing a hierarchy of lists of attributes, an attribute being comprised 
of an attribute identifier and an attribute value, the attribute value being comprised 
of either a list of attributes or a controlling value used by the security scanner 
program to control an operation of the security scanner program, the list of 
attributes being comprised of a grouping attribute and a series of one or more 
attributes; 

examining the grouping attribute associated with the list of attributes; 

updating an element of the list of attributes if the grouping attribute 
indicates that the element may be updated without also updating other elements in 
the list of attributes: 
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updating the element and all other elements of the list of attributes if the 
grouping attribute indicates tlial updating the element requires all other elements 
to be updated; and 

updating the element, all other elements, and all subordinate elements of 
the Ust of attributes if the grouping attribute indicates that updating the element 
requires all subordinate elements of the list of attributes to be updated; 

wherein the grouping attribute is associated with the entire list of attributes 
for controlling the updating through selection of at least one of at least three 
scenarios by indicating at least one of: 

the element mav be updated without also updating other elements 
in the list of attributes. 

updating the element requires all other elements in the Ust of 
attributes to be updated, and 

updating the clement requires all other elements in the list of 
attributes and all su bo rdinate elements in the list of attributes to be 
updated . 

10. (Original) The computer-readable storage medium of claim 9, 
wherein the element of the list of attributes contains an identifier that uniquely 
identifies the element and a value, wherein the value may itself be a list of 
elements. 

1 1 . (Cancelled) 

12- (Original) The computer-readable storage medium of claim 10, 
wherein updating the element involves overwriting the value with another value 
that may be identical to an original value. 

Docket: NAI1P250 00.024.01 -5- 



* RCVD AT 8^9/2004 6:57:7(1 PM [Eastern Daylight Tlmej « SVR:USPT0-EFXRF.1/4 * DNIS:872fl306 * CS1D:408 971 4660 « DURATION (mm«s):05.38 



Hue 19 03:05p SVIPG 



408 971 4B60 



1 3. (Original) The computer-readable storage mediutn of claim 1 0, 
wherein updating the element and all other elements of the list of attributes 
involves overwTiting each value with another value that may be identical to an 
original value. 

14. (Original) The computer-readable storage medium of claim 10, 
wherein updating the element, all other elements in the list of attributes, and all 
subordinate elements of the list of attributes involves overwriting each value with 
another value that may be identical to an original value for each element and each 
subordinate element of the list of attributes. 

15. (Original) The computer-readable storage medium of claim 10, 
wherein if the attribute being updated is itself another list of attributes, the 
grouping attribute can indicate one of: 

the attribute can be updated; 

a content of the list of attributes can be replaced; and 

the other list of attributes can be merged with the list of attributes. 

16. (Original) The computer-readable storage medium of claim 9, 
wherein the security scanner program performs a scanning process on files 
associated with the computing node for malicious computer instructions, wherein 
details of the scanning process are specified by the list of security scanner 
attributes. 

17. (Currently Amended) An apparatus that facilitates establishing a 
list of security scanner attributes for a computing node within a hierarchy of 
computing nodes, the list of security scanner attributes being associated vrith a 
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security scanner action to be performed by a security scanner program, 
comprising: 

an establishing mechanism that is configured to establish a hierarchy of 
lists of attributes, an attribute being comprised of an attribute identifier and an 
attribute value, the attribute value being comprised of either a list of attributes .or a 
controlling value used by the securLt>' scanner program to control an operation of 
the security scanner program, thi^ Hst of attributes being comprised of a grouping 
attribute and a series of one or more attributes; 

an examining mechanism that is configured to examine the grouping 
attribute associated with the list of attributes; 

an updating mechanism that is configured to update an element of the list 
of attributes if the grouping attribute indicates that the element may be updated 
without also updating other elements in the list of attributes; 

wherein the updating mechanism is further configured to update the 
element and all other elements of the list of attributes if the grouping attribute 
indicates that updating the element requires all other elements to be updated; and 

wherein the updating mechanism is further configured to update die 
element, all other elements, and all subordinate elements of the list of attributes if 
the grouping attribute indicates that updating the element requires all subordinate 
elements of the hst of attributes to be updated: 

wherein the grouping attribute is associated wdth the entire list of attributes 
for controlling the updating through selection of at least one of at least tliree 
scenarios by indicating at least one of: 

the element may be updated without also updating other elements 

in the list of attributes, 

updating the element requires all other elements in the list of 

attributes to be updated, and 
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updating the element requires all other elements in the list of 
attributes and all subordinate elements in the list of attributes to be 
updated . 

1 8. (Original) The apparatus of claim 17, wherein the element of the 
list of attributes contains an identifier tliat uniquely identifies the element and a 
value, wherein the value may itself be a list of elements. 

19. (Cancelled) 

20. (Original) The apparatus of claim 18, wherein the updating 
mechanism is configured to overwrite the value with another value that may be 
identical to an original value. 

2 1 . (Original) The apparatus of claim 1 8, wherein the updating 
mechanism is configured to update the element and all other elements of the list of 
attributes by overwriting each value with another value that may be identical to an 
original value. 

22. (Original) The apparatus of claim 18, wherein the updating 
mechanism is configured to update the element, all other elements in the list of 
attributes, and all subordinate elements of the list of attributes by overwriting each 
value with another value that may be identical to an original value for each 
element and each subordinate element of the list of attributes. 

23. (Original) The apparatus of claim 18, wherein if the attribute being 
updated is itself another list of attributes, the grouping attribute can indicate one 
of: 
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the attribute can be updated; 

a content of the list of attributes can be replaced; and 

the other list of attributes can be merged with the list of attributes. 

24. (Original) The apparatus of claim 17, wherein the security scanner 
program is configured to perform a scanning process on files associated with the 
computing node for malicious computer instructions, wherein details of the 
scanning process are specified by the list of security scanner attributes. 

25. (New) The method of claim 1, wherein the attribute value includes 
a second list of attributes used by the security scanner program to control the 
operation of the security scanner program, 

26. (New) The method of claim 25, wherein the second list of 
attributes includes a second grouping attribute associated each of the attributes of 
the second list. 
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